Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa
File:                     43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa (raw, json)
Hash identifier:          nsJSCBC8ckBnVpTXn2UhExT3ubN1QfPWpQnkUhNvrfM=
Subject key identifier:   44:E2:0A:78:B7:F2:C8:03:6D:43:24:B6:1E:CC:09:70:DC:AD:2D:82
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584D1707EC8009BBAD1F89B3A580
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     30036
IP address blocks:        173.31.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:ec:80:09:bb:ad:1f:89:b3:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=3cc9b8af-8b0d-462b-8794-ee24ec6c4876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:0c:38:75:73:f8:8f:28:71:5a:0b:4e:cd:
                    98:2f:90:3a:9e:0c:6d:a6:f4:c4:97:59:f7:c0:e5:
                    6f:15:ee:b3:23:5d:a4:52:d5:87:a2:e7:e9:35:cd:
                    2e:ed:19:f0:e3:62:a5:34:fc:db:60:ed:1e:5c:4f:
                    b4:ea:4a:b7:2c:84:c5:2f:a8:14:33:72:d6:d5:00:
                    9c:37:3d:5a:4d:de:0b:2a:ae:77:10:42:12:94:49:
                    53:08:d7:46:0c:d4:2c:be:6d:e3:d5:f6:b2:ef:6e:
                    71:c5:0a:e7:23:71:17:bc:fd:ff:33:93:e0:9c:98:
                    88:46:66:a8:b7:40:8c:91:30:44:2d:46:30:e4:c1:
                    85:7f:fc:ec:71:48:b5:58:0d:cc:d3:63:52:be:a9:
                    8e:d2:dd:f8:3d:46:5d:8c:09:c9:25:b9:7f:68:54:
                    61:33:ab:8d:28:5d:18:b6:d5:94:73:2d:97:bf:ab:
                    e0:8f:aa:37:31:74:15:20:c7:14:2f:46:78:2f:b0:
                    4d:64:75:72:10:00:39:0c:92:78:9d:44:3a:6e:73:
                    dc:c7:ff:34:e2:1a:e0:4a:b8:dc:15:4f:a9:59:a8:
                    e4:76:d6:12:6f:7c:cd:af:38:74:a3:6d:93:46:8c:
                    db:52:52:33:77:41:fb:de:99:3b:f2:9c:1e:9f:b2:
                    62:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E2:0A:78:B7:F2:C8:03:6D:43:24:B6:1E:CC:09:70:DC:AD:2D:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/43a2d4b6-3f9d-30a4-b9cd-d44496d278e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:65:c7:87:a2:28:0e:78:45:cc:7e:29:1d:61:90:3d:cb:68:
         02:8c:dc:b9:ca:0f:03:79:43:2c:8b:bd:a3:ba:a3:45:68:db:
         32:8a:3d:f1:6d:cc:6a:c4:7d:7b:d8:aa:cf:2a:68:d4:a6:9f:
         a1:f3:ff:7f:5b:78:ac:37:9c:af:ff:fc:92:59:16:52:dc:e1:
         ad:0d:f4:7d:99:db:82:31:59:69:29:26:a3:3e:c9:2b:cd:f0:
         ee:5f:dd:05:12:67:b2:cc:59:e4:f4:a9:d0:96:80:2d:0a:71:
         83:2a:77:85:50:1e:cf:a7:82:53:dd:bd:93:b8:ef:dd:c4:a9:
         6c:57:d9:c0:52:83:7d:55:61:f4:12:a6:bd:35:46:a7:7a:4a:
         c0:0a:fd:3e:e9:ee:21:87:79:e2:45:56:5f:a7:1b:f3:24:76:
         0e:bf:0e:33:62:05:c2:fd:3d:2f:fc:57:22:9e:48:b0:e8:02:
         7b:56:a6:b0:b0:fc:8c:8a:b7:14:e2:0c:02:f7:ac:cf:5f:d3:
         8b:b3:8c:7a:a9:58:a8:5c:f0:3b:6b:6d:31:c9:9b:38:a2:47:
         6f:6d:55:5c:95:4a:35:6b:cf:b7:6c:c0:91:c0:a7:16:37:d4:
         b1:af:db:d9:5d:41:23:ae:f2:a7:e2:d5:3c:72:fe:6f:f7:cd:
         eb:79:23:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB+yACbutH4mzpYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk
M2NjOWI4YWYtOGIwZC00NjJiLTg3OTQtZWUyNGVjNmM0ODc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq28MOHVz+I8ocVoLTs2YL5A6ngxtpvTEl1n3
wOVvFe6zI12kUtWHoufpNc0u7Rnw42KlNPzbYO0eXE+06kq3LITFL6gUM3LW1QCc
Nz1aTd4LKq53EEISlElTCNdGDNQsvm3j1fay725xxQrnI3EXvP3/M5PgnJiIRmao
t0CMkTBELUYw5MGFf/zscUi1WA3M02NSvqmO0t34PUZdjAnJJbl/aFRhM6uNKF0Y
ttWUcy2Xv6vgj6o3MXQVIMcUL0Z4L7BNZHVyEAA5DJJ4nUQ6bnPcx/804hrgSrjc
FU+pWajkdtYSb3zNrzh0o22TRozbUlIzd0H73pk78pwen7Ji9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETiCni38sgDbUMkth7MCXDcrS2CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDNhMmQ0YjYtM2Y5ZC0z
MGE0LWI5Y2QtZDQ0NDk2ZDI3OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrR8oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhlx4eiKA54Rcx+KR1hkD3LaAKM3LnKDwN5QyyLvaO6o0Vo2zKKPfFt
zGrEfXvYqs8qaNSmn6Hz/39beKw3nK///JJZFlLc4a0N9H2Z24IxWWkpJqM+ySvN
8O5f3QUSZ7LMWeT0qdCWgC0KcYMqd4VQHs+nglPdvZO4793EqWxX2cBSg31VYfQS
pr01Rqd6SsAK/T7p7iGHeeJFVl+nG/Mkdg6/DjNiBcL9PS/8VyKeSLDoAntWprCw
/IyKtxTiDAL3rM9f04uzjHqpWKhc8DtrbTHJmziiR29tVVyVSjVrz7dswJHApxY3
1LGv29ldQSOu8qfi1Txy/m/3zet5I/M=
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:41:21 2026 by rpki-client